v4.1.450

Update dependency balena-io/balena-cli to v22.1.1

.github/workflows/tests.yml

@@ -51,8 +51,8 @@ jobs:
             launch_template_version: ${{ vars.AWS_EC2_LT_VERSION || '6' }}
             # https://docs.renovatebot.com/modules/datasource/aws-machine-image/
             # amiFilter=[{"Name":"owner-id","Values":["099720109477"]},{"Name":"name","Values":["ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-*"]},{"region":"us-east-1"}]
-            # currentImageName=ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-20241206
+            # currentImageName=ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-20250610
-            ami: ami-00f3c44a2de45a590
+            ami: ami-020cba7c55df1f615
             subdomain:  ${{ vars.DNS_SUBDOMAIN || 'auto' }}
             dns_tld: ${{ vars.DNS_TLD || 'balena-devices.com' }}
 
@@ -60,9 +60,9 @@ jobs:
           - target: balena-public-pki
             launch_template_version: ${{ vars.AWS_EC2_LT_VERSION || '6' }}
             # https://docs.renovatebot.com/modules/datasource/aws-machine-image/
-            # amiFilter=[{"Name":"owner-id","Values":["491725000532"]},{"Name":"name","Values":["balenaOS-installer-secureboot-*-generic-amd64"]},{"region":"us-east-1"}]
+            # amiFilter=[{"Name":"owner-id","Values":["491725000532"]},{"Name":"name","Values":["balenaOS!(-secureboot)-*.*.*-generic-amd64"]},{"region":"us-east-1"}]
-            # currentImageName=unknown
+            # currentImageName=balenaOS-6.5.29-generic-amd64
-            ami: ami-03a3995797dee84fa
+            ami: ami-0ffdbd60c5229c1e2
             # https://dash.cloudflare.com/001b3ed2352612aaa068aca1b0022736/balena-devices.com/dns
             subdomain:  ${{ vars.DNS_SUBDOMAIN || 'auto' }}
             dns_tld: ${{ vars.DNS_TLD || 'balena-devices.com' }}
@@ -73,15 +73,16 @@ jobs:
       name: ${{ matrix.target }}
 
     steps:
-    - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
+    - uses: actions/checkout@09d2acae674a48949e3602304ab46fd20ae0c42f
       with:
         persist-credentials: false
+        ref: ${{ github.event.pull_request.head.sha }}
 
     # https://github.com/unfor19/install-aws-cli-action
     - name: Setup awscli
       uses: unfor19/install-aws-cli-action@e8b481e524a99f37fbd39fdc1dcb3341ab091367 # v1
 
-    - uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722
+    - uses: aws-actions/configure-aws-credentials@3bb878b6ab43ba8717918141cd07a0ea68cfe7ea
       with:
         aws-region: ${{ vars.AWS_REGION || 'us-east-1' }}
         role-session-name: github-${{ github.job }}-${{ github.run_id }}-${{ github.run_attempt }}
@@ -101,10 +102,12 @@ jobs:
 
     # https://github.com/balena-io-examples/setup-balena-action
     - name: Setup balena CLI
-      uses: balena-io-examples/setup-balena-action@main
+      uses: balena-io-examples/setup-balena-action@a3dc55eb5a1efe3368778f19b9b8a2ac41ddf44c # v0.0.20
-      with:
+      env:
         # renovate: datasource=github-releases depName=balena-io/balena-cli
-        cli-version: v18.2.17
+        BALENA_CLI_VERSION: v22.1.1
+      with:
+        cli-version: ${{ env.BALENA_CLI_VERSION }}
 
     # https://github.com/pdcastro/ssh-uuid#why
     # https://github.com/pdcastro/ssh-uuid#linux-debian-ubuntu-others
@@ -180,7 +183,7 @@ jobs:
         AWS_DEFAULT_REGION: ${{ vars.AWS_REGION || 'us-east-1' }}
 
     # https://github.com/webfactory/ssh-agent
-    - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
+    - uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
       with:
         ssh-private-key: ${{ steps.generate-key-pair.outputs.ssh_private_key }}
 
@@ -242,9 +245,8 @@ jobs:
         with_backoff balena login --token '${{ secrets.BALENA_API_KEY }}'
 
         pr_id='${{ github.event.pull_request.id }}'
-        head_sha='${{ github.event.pull_request.head.sha || github.event.head_commit.id }}'
         release_id="$(with_backoff balena releases '${{ matrix.fleet }}' --json \
-          | jq -r --arg pr_id "${pr_id}" --arg head_sha "${head_sha}" '.[]
+          | jq -r --arg pr_id "${pr_id}" --arg head_sha "${COMMIT}" '.[]
           | select(.release_tag[].tag_key=="balena-ci-commit-sha")
           | select(.release_tag[].value==$head_sha)
           | select(.release_tag[].tag_key=="balena-ci-id")
@@ -256,6 +258,9 @@ jobs:
 
         with_backoff balena device ${{ steps.register-test-device.outputs.balena_device_uuid }}
 
+      env:
+        COMMIT: ${{ github.event.pull_request.head.sha  }}
+
     - name: configure balenaOS test device environment
       if: matrix.target == 'balena-public-pki'
       run: |
@@ -387,6 +392,10 @@ jobs:
           --service cert-manager \
           --device '${{ steps.register-test-device.outputs.balena_device_uuid }}'
 
+        with_backoff balena env add AWS_SESSION_TOKEN '${{ env.AWS_SESSION_TOKEN }}' \
+          --service cert-manager \
+          --device '${{ steps.register-test-device.outputs.balena_device_uuid }}'
+
     - name: provision balenaOS ephemeral SUT
       id: balena-sut
       if: matrix.target == 'balena-public-pki'
@@ -856,7 +865,6 @@ jobs:
       env:
         ATTEMPTS: 2
         AWS_DEFAULT_REGION: ${{ vars.AWS_REGION || 'us-east-1' }}
-        COMMIT: ${{ github.event.pull_request.head.sha || github.event.head_commit.id || github.event.pull_request.head.ref }}
 
     - name: SUT&DUT (Ubuntu/compose)
       if: matrix.target == 'compose-private-pki'
@@ -910,7 +918,7 @@ jobs:
         # docs/getting-started.md
         cmds="set -ax \
           && cloud-init status --wait --long && cat </var/log/cloud-init-output.log \
-          && sudo -u balena git clone https://token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git /home/balena/open-balena \
+          && sudo -u balena git clone https://token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.event.pull_request.head.repo.full_name }}.git /home/balena/open-balena \
           && sudo -u balena git config --global --add safe.directory /home/balena/open-balena \
           && cd /home/balena/open-balena \
           && sudo -u balena git checkout ${COMMIT} \

CHANGELOG.md

@@ -4,6 +4,561 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+# v4.1.450
+## (2025-06-20)
+
+* Update dependency balena-io/balena-cli to v22.1.1 [balena-renovate[bot]]
+
+# v4.1.449
+## (2025-06-20)
+
+* Update balena/open-balena-api Docker tag to v37.3.2 [balena-renovate[bot]]
+
+# v4.1.448
+## (2025-06-20)
+
+* Update balena-io-examples/setup-balena-action action to v0.0.20 [balena-renovate[bot]]
+
+# v4.1.447
+## (2025-06-19)
+
+* Update balena/open-balena-api Docker tag to v37.3.0 [balena-renovate[bot]]
+
+# v4.1.446
+## (2025-06-17)
+
+* Update aws-actions/configure-aws-credentials digest to 3bb878b [balena-renovate[bot]]
+
+# v4.1.445
+## (2025-06-13)
+
+* Update balena/open-balena-api Docker tag to v37.2.1 [balena-renovate[bot]]
+
+# v4.1.444
+## (2025-06-13)
+
+* Update balena/open-balena-api Docker tag to v37.2.0 [balena-renovate[bot]]
+
+# v4.1.443
+## (2025-06-12)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.75 [balena-renovate[bot]]
+
+# v4.1.442
+## (2025-06-12)
+
+* Update balena/open-balena-api Docker tag to v37.1.10 [balena-renovate[bot]]
+
+# v4.1.441
+## (2025-06-10)
+
+* Update balena/open-balena-api Docker tag to v37.1.8 [balena-renovate[bot]]
+
+# v4.1.440
+## (2025-06-10)
+
+* Update balena/open-balena-api Docker tag to v37.1.7 [balena-renovate[bot]]
+
+# v4.1.439
+## (2025-06-10)
+
+* Update actions/checkout digest to 09d2aca [balena-renovate[bot]]
+
+# v4.1.438
+## (2025-06-10)
+
+* Update dependency ami to ami-020cba7c55df1f615 [balena-renovate[bot]]
+
+# v4.1.437
+## (2025-06-10)
+
+* Update aws-actions/configure-aws-credentials digest to a95656f [balena-renovate[bot]]
+
+# v4.1.436
+## (2025-06-09)
+
+* Update balena-io-examples/setup-balena-action action to v0.0.19 [balena-renovate[bot]]
+
+# v4.1.435
+## (2025-06-09)
+
+* Update dependency balena-io/balena-cli to v22.1.0 [balena-renovate[bot]]
+
+# v4.1.434
+## (2025-06-05)
+
+* Update aws-actions/configure-aws-credentials digest to ab0ba40 [balena-renovate[bot]]
+
+# v4.1.433
+## (2025-06-03)
+
+* Update aws-actions/configure-aws-credentials digest to 151e7fe [balena-renovate[bot]]
+
+# v4.1.432
+## (2025-06-02)
+
+* Update dependency balena-io/balena-cli to v22.0.6 [balena-renovate[bot]]
+
+# v4.1.431
+## (2025-06-02)
+
+* Update dependency ami to ami-0731becbf832f281e [balena-renovate[bot]]
+
+# v4.1.430
+## (2025-06-02)
+
+* Update balena-io-examples/setup-balena-action action to v0.0.18 [balena-renovate[bot]]
+
+# v4.1.429
+## (2025-06-02)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.28 [balena-renovate[bot]]
+
+# v4.1.428
+## (2025-05-30)
+
+* Update dependency balena-io/balena-cli to v22.0.5 [balena-renovate[bot]]
+
+# v4.1.427
+## (2025-05-30)
+
+* Update dependency balena-io/balena-cli to v22 [balena-renovate[bot]]
+
+# v4.1.426
+## (2025-05-29)
+
+* Update balena-io-examples/setup-balena-action action to v0.0.17 [balena-renovate[bot]]
+
+# v4.1.425
+## (2025-05-29)
+
+* Update balena/open-balena-api Docker tag to v37.1.6 [balena-renovate[bot]]
+
+# v4.1.424
+## (2025-05-28)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.27 [balena-renovate[bot]]
+
+# v4.1.423
+## (2025-05-27)
+
+* Update balena/open-balena-api Docker tag to v37.1.5 [balena-renovate[bot]]
+
+# v4.1.422
+## (2025-05-27)
+
+* Update dependency balena-io/balena-cli to v21 [balena-renovate[bot]]
+
+# v4.1.421
+## (2025-05-27)
+
+* Update balena/open-balena-api Docker tag to v37.1.4 [balena-renovate[bot]]
+
+# v4.1.420
+## (2025-05-27)
+
+* Update balena/open-balena-api Docker tag to v37.1.3 [balena-renovate[bot]]
+
+# v4.1.419
+## (2025-05-27)
+
+* Update dependency balena-io/balena-cli to v20 [balena-renovate[bot]]
+
+# v4.1.418
+## (2025-05-27)
+
+* Update aws-actions/configure-aws-credentials digest to b92d0d9 [balena-renovate[bot]]
+
+# v4.1.417
+## (2025-05-27)
+
+* patch: Only match balenaOS (non secure-boot) images [Anton Belodedenko]
+
+# v4.1.416
+## (2025-05-26)
+
+* Update balena-io-examples/setup-balena-action action to v0.0.12 [balena-renovate[bot]]
+
+# v4.1.415
+## (2025-05-26)
+
+* Update dependency balena-io/balena-cli to v18.2.34 [balena-renovate[bot]]
+
+# v4.1.414
+## (2025-05-26)
+
+* Update balena-io-examples/setup-balena-action action to v0.0.11 [balena-renovate[bot]]
+
+# v4.1.413
+## (2025-05-26)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.25 [balena-renovate[bot]]
+
+# v4.1.412
+## (2025-05-26)
+
+* Update ghcr.io/qemus/qemu Docker tag to v7 [balena-renovate[bot]]
+
+# v4.1.411
+## (2025-05-24)
+
+* Update balena-io-examples/setup-balena-action action to v0.0.9 [balena-renovate[bot]]
+
+# v4.1.410
+## (2025-05-23)
+
+* Pin balena-io-examples/setup-balena-action action to 41338eb [balena-renovate[bot]]
+
+# v4.1.409
+## (2025-05-23)
+
+* Update redis Docker tag to v8 [balena-renovate[bot]]
+
+# v4.1.408
+## (2025-05-23)
+
+* Fix renovate actions regex match for balena-cli version [Kyle Harding]
+
+# v4.1.407
+## (2025-05-23)
+
+* Update balena/open-balena-api Docker tag to v37 [balena-renovate[bot]]
+
+# v4.1.406
+## (2025-05-23)
+
+* Update ghcr.io/qemus/qemu Docker tag to v6.22 [balena-renovate[bot]]
+
+# v4.1.405
+## (2025-05-22)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.24 [balena-renovate[bot]]
+
+# v4.1.404
+## (2025-05-22)
+
+* Update balena/open-balena-api Docker tag to v36 [balena-renovate[bot]]
+
+# v4.1.403
+## (2025-05-22)
+
+* Update balena/open-balena-registry Docker tag to v2.42.0 [balena-renovate[bot]]
+
+# v4.1.402
+## (2025-05-22)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.74 [balena-renovate[bot]]
+
+# v4.1.401
+## (2025-05-22)
+
+* Update balena/open-balena-api Docker tag to v35.2.0 [balena-renovate[bot]]
+
+# v4.1.400
+## (2025-05-22)
+
+* Update dependency balena-io/balena-cli to v21.1.14 [balena-renovate[bot]]
+
+# v4.1.399
+## (2025-05-22)
+
+* Update balena/cert-manager Docker tag to v0.3.3 [balena-renovate[bot]]
+
+# v4.1.398
+## (2025-05-21)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.73 [balena-renovate[bot]]
+
+# v4.1.397
+## (2025-05-21)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.23 [balena-renovate[bot]]
+
+# v4.1.396
+## (2025-05-20)
+
+* Update ami digest to balenaOS-6.5.29-generic-amd64 [balena-renovate[bot]]
+
+# v4.1.395
+## (2025-05-20)
+
+* Update aws-actions/configure-aws-credentials digest to 439a529 [balena-renovate[bot]]
+
+# v4.1.394
+## (2025-05-20)
+
+* Update dependency ami to ami-0a7620d611d3ceae4 [balena-renovate[bot]]
+
+# v4.1.393
+## (2025-05-20)
+
+* Update balena/open-balena-registry Docker tag to v2.41.31 [balena-renovate[bot]]
+
+# v4.1.392
+## (2025-05-20)
+
+* Update balena/open-balena-api Docker tag to v35.0.6 [balena-renovate[bot]]
+
+# v4.1.391
+## (2025-05-20)
+
+* patch: Update Renovate balenaOS AMI match [Anton Belodedenko]
+
+# v4.1.390
+## (2025-03-20)
+
+* Update balena/open-balena-api Docker tag to v35 [balena-renovate[bot]]
+
+# v4.1.389
+## (2025-03-20)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.6 [balena-renovate[bot]]
+
+# v4.1.388
+## (2025-03-20)
+
+* patch: Add missing session token to use ephemeral AWS creds. [Anton Belodedenko]
+
+# v4.1.387
+## (2025-03-19)
+
+* Update balena/open-balena-api Docker tag to v34.10.3 [balena-renovate[bot]]
+
+# v4.1.386
+## (2025-03-18)
+
+* Update balena/open-balena-api Docker tag to v34.10.2 [balena-renovate[bot]]
+
+# v4.1.385
+## (2025-03-17)
+
+* Update webfactory/ssh-agent action to v0.9.1 [balena-renovate[bot]]
+
+# v4.1.384
+## (2025-03-17)
+
+* Update balena/cert-manager Docker tag to v0.3.1 [balena-renovate[bot]]
+
+# v4.1.383
+## (2025-03-17)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.5 [balena-renovate[bot]]
+
+# v4.1.382
+## (2025-03-14)
+
+* Update balena/open-balena-registry Docker tag to v2.41.25 [balena-renovate[bot]]
+
+# v4.1.381
+## (2025-03-14)
+
+* Update balena/open-balena-vpn Docker tag to v11.32.4 [balena-renovate[bot]]
+
+# v4.1.380
+## (2025-03-14)
+
+* Update balena/open-balena-api Docker tag to v34.10.1 [balena-renovate[bot]]
+
+# v4.1.379
+## (2025-03-13)
+
+* Update balena/open-balena-vpn Docker tag to v11.31.2 [balena-renovate[bot]]
+
+# v4.1.378
+## (2025-03-13)
+
+* Update dependency balena-io/balena-cli to v21 [balena-renovate[bot]]
+
+# v4.1.377
+## (2025-03-07)
+
+* Update balena/open-balena-api Docker tag to v34.9.5 [balena-renovate[bot]]
+
+# v4.1.376
+## (2025-03-07)
+
+* Update balena/open-balena-api Docker tag to v34.9.4 [balena-renovate[bot]]
+
+# v4.1.375
+## (2025-03-07)
+
+* Update balena/open-balena-api Docker tag to v34.9.3 [balena-renovate[bot]]
+
+# v4.1.374
+## (2025-03-07)
+
+* Update balena/open-balena-api Docker tag to v34.9.2 [balena-renovate[bot]]
+
+# v4.1.373
+## (2025-03-06)
+
+* Update qemux/qemu-docker Docker tag to v6.20 [balena-renovate[bot]]
+
+# v4.1.372
+## (2025-03-06)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.68 [balena-renovate[bot]]
+
+# v4.1.371
+## (2025-03-06)
+
+* Update balena/open-balena-registry Docker tag to v2.41.24 [balena-renovate[bot]]
+
+# v4.1.370
+## (2025-03-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.31.1 [balena-renovate[bot]]
+
+# v4.1.369
+## (2025-03-04)
+
+* Update balena/open-balena-api Docker tag to v34.9.1 [balena-renovate[bot]]
+
+# v4.1.368
+## (2025-03-03)
+
+* Update qemux/qemu-docker Docker tag to v6.19 [balena-renovate[bot]]
+
+# v4.1.367
+## (2025-02-28)
+
+* Update balena/open-balena-vpn Docker tag to v11.31.0 [balena-renovate[bot]]
+
+# v4.1.366
+## (2025-02-28)
+
+* Update balena/open-balena-api Docker tag to v34.9.0 [balena-renovate[bot]]
+
+# v4.1.365
+## (2025-02-26)
+
+* Update qemux/qemu-docker Docker tag to v6.18 [balena-renovate[bot]]
+
+# v4.1.364
+## (2025-02-26)
+
+* Update dependency balena-io/balena-cli to v20.2.9 [balena-renovate[bot]]
+
+# v4.1.363
+## (2025-02-26)
+
+* Update dependency balena-io/balena-cli to v20.2.8 [balena-renovate[bot]]
+
+# v4.1.362
+## (2025-02-25)
+
+* Update dependency balena-io/balena-cli to v20.2.7 [balena-renovate[bot]]
+
+# v4.1.361
+## (2025-02-25)
+
+* Update dependency balena-io/balena-cli to v20.2.6 [balena-renovate[bot]]
+
+# v4.1.360
+## (2025-02-25)
+
+* Update dependency balena-io/balena-cli to v20.2.5 [balena-renovate[bot]]
+
+# v4.1.359
+## (2025-02-25)
+
+* Update balena/open-balena-api Docker tag to v34.8.0 [balena-renovate[bot]]
+
+# v4.1.358
+## (2025-02-25)
+
+* Update qemux/qemu-docker Docker tag to v6.17 [balena-renovate[bot]]
+
+# v4.1.357
+## (2025-02-24)
+
+* Tab was inserted incorrectly [Martin Juhl]
+
+# v4.1.356
+## (2025-02-24)
+
+* Support testing external commits [Anton Belodedenko]
+
+# v4.1.355
+## (2025-02-24)
+
+* Update balena/open-balena-api Docker tag to v34.7.0 [balena-renovate[bot]]
+
+# v4.1.354
+## (2025-02-24)
+
+* Update balena/open-balena-api Docker tag to v34.6.1 [balena-renovate[bot]]
+
+# v4.1.353
+## (2025-02-24)
+
+* Update balena/open-balena-api Docker tag to v34.6.0 [balena-renovate[bot]]
+
+# v4.1.352
+## (2025-02-24)
+
+* Update qemux/qemu-docker Docker tag to v6.16 [balena-renovate[bot]]
+
+# v4.1.351
+## (2025-02-20)
+
+* Update balena/open-balena-api Docker tag to v34.5.1 [balena-renovate[bot]]
+
+# v4.1.350
+## (2025-02-18)
+
+* Update balena/open-balena-api Docker tag to v34.5.0 [balena-renovate[bot]]
+
+# v4.1.349
+## (2025-02-17)
+
+* Update balena/open-balena-api Docker tag to v34.4.12 [balena-renovate[bot]]
+
+# v4.1.348
+## (2025-02-17)
+
+* Update qemux/qemu-docker Docker tag to v6.15 [balena-renovate[bot]]
+
+# v4.1.347
+## (2025-02-17)
+
+* Update balena/open-balena-api Docker tag to v34.4.11 [balena-renovate[bot]]
+
+# v4.1.346
+## (2025-02-17)
+
+* Update balena/open-balena-api Docker tag to v34.4.10 [balena-renovate[bot]]
+
+# v4.1.345
+## (2025-02-14)
+
+* Update balena/open-balena-api Docker tag to v34.4.8 [balena-renovate[bot]]
+
+# v4.1.344
+## (2025-02-13)
+
+* Update balena/open-balena-api Docker tag to v34.4.7 [balena-renovate[bot]]
+
+# v4.1.343
+## (2025-02-13)
+
+* Update balena/open-balena-db Docker tag to v6 [balena-renovate[bot]]
+
+# v4.1.342
+## (2025-02-13)
+
+* Update balena/open-balena-api Docker tag to v34.4.4 [balena-renovate[bot]]
+
+# v4.1.341
+## (2025-02-13)
+
+* Update balena/open-balena-api Docker tag to v34.4.3 [balena-renovate[bot]]
+
+# v4.1.340
+## (2025-02-12)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.83 [balena-renovate[bot]]
+
 # v4.1.339
 ## (2025-02-12)
 

VERSION

@@ -1 +1 @@
-4.1.339
+4.1.450

balena.yml

@@ -23,4 +23,4 @@ data:
     - generic-amd64
     - genericx86-64-ext
     - intel-nuc
-version: 4.1.339
+version: 4.1.450

docker-compose.yml

@@ -79,7 +79,7 @@ services:
       *with-default-privileges,
       *with-default-volumes,
     ]
-    image: balena/open-balena-api:v34.4.2
+    image: balena/open-balena-api:37.3.2
     depends_on:
       - db
       - redis
@@ -119,7 +119,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-registry:2.41.23
+    image: balena/open-balena-registry:2.42.0
     volumes:
       - certs-data:/certs
       - resin-data:/balena
@@ -146,7 +146,7 @@ services:
       *with-network-privileges,
       *with-default-privileges,
     ]
-    image: balena/open-balena-vpn:v11.30.82
+    image: balena/open-balena-vpn:11.32.28
     depends_on:
       - api
     environment:
@@ -162,7 +162,7 @@ services:
   # https://github.com/balena-io/open-balena-db
   db:
     <<: *base-service
-    image: balena/open-balena-db:v5.2.2
+    image: balena/open-balena-db:6.0.0
     volumes:
       - db-data:/var/lib/postgresql/data
     environment:
@@ -177,7 +177,7 @@ services:
       *with-default-healthcheck,
       *with-default-privileges,
     ]
-    image: balena/open-balena-s3:2.28.67
+    image: balena/open-balena-s3:2.28.75
     volumes:
       - s3-data:/export
       - certs-data:/certs
@@ -191,7 +191,7 @@ services:
   redis:
     <<: *base-service
     # https://redis.io/blog/what-redis-license-change-means-for-our-managed-service-providers/
-    image: redis:7.4-alpine
+    image: redis:8.0-alpine
     volumes:
       - redis-data:/data
     healthcheck:
@@ -235,7 +235,7 @@ services:
       ALIASES: api,ca,cloudlink,db,delta,logs,redis,registry2,s3,stats,tunnel
     labels:
       io.balena.features.balena-socket: 1
-      io.balena.features.supervisor-api	: 1
+      io.balena.features.supervisor-api: 1
 
   # https://github.com/balena-io/cert-manager
   # https://certbot.eff.org/docs/using.html
@@ -319,7 +319,7 @@ services:
       *with-extended-privileges,
       *with-network-privileges,
     ]
-    # https://hub.docker.com/r/qemux/qemu-docker
+    # https://hub.docker.com/r/qemux/qemu
     # https://github.com/qemus/qemu-docker
     build: src/test-device
     entrypoint:

src/balena-tests/Dockerfile

@@ -1,7 +1,7 @@
 FROM ubuntu:24.04
 
 # renovate: datasource=github-releases depName=balena-io/balena-cli
-ARG BALENA_CLI_VERSION=v20.2.3
+ARG BALENA_CLI_VERSION=v22.1.1
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
 	bash \
@@ -21,11 +21,9 @@ RUN curl -fsSL https://get.docker.com | sh
 WORKDIR /opt
 
 RUN set -x; arch=$(uname -m | sed 's/86_64/64/g') \
-    && wget -q "https://github.com/balena-io/balena-cli/releases/download/${BALENA_CLI_VERSION}/balena-cli-${BALENA_CLI_VERSION}-linux-${arch}-standalone.zip" \
+    && wget -qO- "https://github.com/balena-io/balena-cli/releases/download/${BALENA_CLI_VERSION}/balena-cli-${BALENA_CLI_VERSION}-linux-${arch}-standalone.tar.gz" | tar -xzf -
-    && unzip -q "balena-cli-${BALENA_CLI_VERSION}-linux-${arch}-standalone.zip" \
-    && rm -rf "balena-cli-${BALENA_CLI_VERSION}-linux-${arch}-standalone.zip"
 
-ENV PATH=/opt/balena-cli:${PATH}
+ENV PATH=/opt/balena/bin:${PATH}
 
 COPY functions balena.sh /usr/sbin/
 

src/cert-manager/Dockerfile

@@ -1,4 +1,4 @@
 # https://github.com/balena-io/cert-manager
-FROM balena/cert-manager:0.2.3
+FROM balena/cert-manager:0.3.3
 
 COPY *.json /opt/

src/test-device/Dockerfile

@@ -1,9 +1,10 @@
-# https://hub.docker.com/r/qemux/qemu-docker
+# https://hub.docker.com/r/qemux/qemu
 # https://github.com/qemus/qemu-docker
-FROM qemux/qemu-docker:6.14
+FROM ghcr.io/qemus/qemu:7.12
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-	minicom \
+    minicom \
+    netcat-openbsd \
     && rm -rf /var/lib/apt/lists/*
 
 COPY balena.sh /usr/sbin/

src/test-device/balena.sh

@@ -21,7 +21,14 @@ until test -f "${GUEST_IMAGE%.*}.ready"; do sleep "$(( (RANDOM % 5) + 5 ))s"; do
 tmpimg="$(mktemp)"
 cat <"${GUEST_IMAGE}" >"${tmpimg}"
 
+# https://www.qemu.org/docs/master/system/qemu-manpage.html
+# .. depending on the target architecture: kvm, xen, hvf, nvmm, whpx (default: tcg)
+if test -r /dev/kvm && test -w /dev/kvm; then
+    accel=kvm
+fi
+
 exec /usr/bin/qemu-system-x86_64 \
+  -accel "${accel:-tcg}" \
   -bios /usr/share/ovmf/OVMF.fd \
   -chardev socket,id=serial0,path=/run/console.sock,server=on,wait=off \
   -cpu max \
@@ -30,7 +37,7 @@ exec /usr/bin/qemu-system-x86_64 \
   -device virtio-net-pci,netdev=n1 \
   -drive file="${tmpimg}",media=disk,cache=none,format=raw,if=none,id=disk \
   -m "${MEMORY}" \
-  -machine q35 \
+  -machine type=q35 \
   -netdev "user,id=n1,dns=127.0.0.1,guestfwd=tcp:10.0.2.100:80-cmd:netcat haproxy 80,guestfwd=tcp:10.0.2.100:443-cmd:netcat haproxy 443" \
   -nodefaults \
   -nographic \